+Title 2 - Assessment of institutions’ governance and strategy on ICT
---+2.1 General principles
------+20. Competent authorities should assess whether the institution’s general governance and internal …
------+21. In conducting this assessment, competent authorities should refer to the requirements and …
------+22. The assessment in this Title does not cover the specific elements of the ICT system governance …
------+23. Point a) referred to in paragraph 22, while providing information about elements of the …
------+24. The outcome of this assessment should inform, where relevant, the assessment of risk management …
---+2.2 ICT strategy
------+25. Under this section competent authorities should assess whether the institution has an ICT …
------+26. Competent authorities should assess whether the institution has a framework in place …
------+27. If the institution’s ICT strategy requires the implementation of important and complex ICT …
---+2.3 Overall internal governance
------+28. In accordance with Title 5 of the EBA SREP Guidelines, competent authorities should assess …
------+29. Further to section 5.2 of the EBA SREP Guidelines, competent authorities should assess whether …
---+2.4 ICT risk in the institution’s risk management framework
------+30. In assessing the institution’s institution-wide risk management and internal controls, as …
------+31. Competent authorities should conduct the assessment under point (a) above having regard to both …
------+32. With specific regard to b), competent authorities should assess whether the independent control …
---+2.5 Summary of findings
------+33. These results should be reflected in the summary of findings under Title 5 of the EBA SREP …
------+34. For the assessment of ICT strategy, the following points should be considered in concluding the …

Title 2 - Assessment of institutions’ governance and strategy on ICT

Title 2 - Assessment of institutions’ governance and strategy on ICT

1. Overview

,
2.1 General principles

2.1 General principles
2.2 ICT strategy

2.2 ICT strategy
2.3 Overall internal governance

2.3 Overall internal governance
2.4 ICT risk in the institution’s risk management framework

2.4 ICT risk in the institution’s risk management framework
2.5 Summary of findings

2.5 Summary of findings

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards
  • EBA - Published by the European Banking Authority at https://www.eba.europa.eu/